how to use

[weli-l]

Is there any documentation for this project? Under what user should bypass4netns run, normal user or root user? What should XDG_RUNTIME_DIR be set to?

[weli-l]

When I run the bypass4netns command, I encounter a problem like this:

cannot listen: listen unix /run/user/1003/bypass4netns.sock: bind: no such file or directory

[AkihiroSuda]

Under what user should bypass4netns run, normal user or root user?

Normal user.

What should XDG_RUNTIME_DIR be set to?

Automatically set by systemd: https://rootlesscontaine.rs/getting-started/common/login/

[AkihiroSuda]

The easiest way to try bypass4netns is to use https://lima-vm.io

limactl start
lima
containerd-rootless-setuptool.sh install-bypass4netnsd
nerdctl run -it --rm --annotation nerdctl/bypass4netns=1 alpine

[weli-l]

The easiest way to try bypass4netns is to use https://lima-vm.io

limactl start
lima
containerd-rootless-setuptool.sh install-bypass4netnsd
nerdctl run -it --rm --annotation nerdctl/bypass4netns=1 alpine

Thanks for your answer. I have successfully run it using Podman.
Does b4ns achieve network isolation? Currently, I only use bypass4netns, deploy it in a container, the container has three network cards, and then start the sandbox in the container. When using iperf3, I found that the sandbox can communicate with all three network cards.